中观信息系统审计风险管理的理论探索与体系构架

近年来,中观信息系统在我国得到广泛应用,中观经济主体对信息系统审计(IS审计)的需求日益广泛。因中观IS审计的研究具有专业性、抽象性等特点,当前我国该方面的研究成果相对较少。基于多种因素考虑,本文认为,我国亟需构建一套成熟的中观IS审计及其风险管理理论体系,旨在对中观信息系统进行科学管理与有效控制。鉴于此,本文在研究中观审计、IS审计、审计风险、风险管理四要素的基础上,对中观IS审计风险管理理论加以梳理,并以信息安全管理为视角,借鉴国外BS7799标准、COBIT模型、通用准则CC、ITIL标准,初步构建了中观IS审计风险管理的框架,该框架以重大错报风险为切入点,深入探索了中观IS审计风险管理的施行思路。

Theory Exploration and Frame Construction of Meso-information Systems Audit Risk Management

In recent years,the increasingly widespread application of meso-information system in China has triggered greater demands from meso-economic entities for this audit system.On the other hand,however,the complex and abstract nature of research in this field has curbed the satisfactory growth of studies both in number and quality.In view of this fact,this paper points out that there is an urgent need to establish a sound theory of meso-information systems audit risk management in order to ensure the scientific...